Berlin Government Confronts Rhysida Ransomware Extortion Ahead of Election

Berlin's state administration disclosed that it is currently grappling with an extortion attempt by the cyber‑crime outfit known as Rhysida, which alleges that the group has exfiltrated roughly 5.79 terabytes of data from government systems. The revelation comes only weeks before the city’s scheduled elections, raising concerns about potential disruption to public services and voter confidence.

The attack was first identified in August, when IT personnel detected anomalous network activity and subsequently isolated affected servers. State officials confirmed that the ransomware operators demanded a payment to halt the public release of the stolen information, a demand that city leaders have publicly refused to meet.

Berlin’s refusal to negotiate follows a broader trend among European governments to adopt a hard line against ransomware payments, citing the risk of incentivising further attacks. Legal advisers have reminded officials that paying ransom could violate anti‑money‑laundering statutes and may not guarantee the return or deletion of compromised data.

Cybersecurity experts warn that the volume of data cited—over five terabytes—suggests a wide‑scale breach that could include personal records, internal communications, and operational documents. While authorities have not detailed the exact nature of the compromised files, they have initiated a comprehensive forensic review and are working with federal agencies to assess any potential impact on election infrastructure.

The incident underscores the heightened vulnerability of public sector networks in an era of increasingly sophisticated ransomware campaigns. As Berlin prepares for the upcoming vote, officials say they are bolstering defensive measures, enhancing monitoring capabilities, and coordinating with international partners to mitigate any further intrusion. The outcome of this extortion attempt may set a precedent for how German authorities respond to similar cyber threats in the future.